Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
File: TPzH4BfCyfdjLacpNHa7fkowNlo.mft (raw, json)
Hash identifier: Z7/Z/nC6E3ZWXy9a1wjr6ddkf/5YNEjKa7LAaOga4KY=
Subject key identifier: 10:A3:E6:83:74:75:9D:17:CD:EF:04:96:CB:77:51:2F:12:A6:55:8C
Authority key identifier: 4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
Certificate issuer: /CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Certificate serial: 01974CD6A0F1EE6422424FCF2849D5931FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 00:00:23 +0000
Manifest this update: Sun 08 Jun 2025 00:00:23 +0000
Manifest next update: Mon 09 Jun 2025 00:00:23 +0000
Files and hashes: 1: OQKKfCP8SjNyLo9484epfP4wbRU.roa (hash: GIFqkdSx0szCVRVxH/rU2b7Y/JXh/nneSVo+VlwXpJY=)
2: TPzH4BfCyfdjLacpNHa7fkowNlo.crl (hash: QMYxh4H2dfkHF5rrUMR1LCFYFL+EqxeBSKXQjwdZ2QU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:a0:f1:ee:64:22:42:4f:cf:28:49:d5:93:1f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Validity
Not Before: Jun 8 00:00:23 2025 GMT
Not After : Jun 9 00:00:23 2025 GMT
Subject: CN=10a3e68374759d17cdef0496cb77512f12a6558c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:de:a0:41:b7:23:fb:44:5d:64:d1:53:b6:
0d:38:9d:71:b9:26:47:e3:be:8e:89:1a:48:88:e5:
d1:34:50:91:93:20:41:8b:a4:10:ef:11:86:f5:ba:
f4:1b:7e:33:b1:83:ff:6e:50:31:62:0a:63:0a:2c:
ec:61:50:a5:42:4a:aa:df:b9:2d:14:42:bd:4a:c6:
a5:03:ff:6a:87:e5:4e:74:fc:c3:cf:fc:9f:6f:0c:
d5:94:82:45:2b:0a:ad:5f:4f:f7:a3:cd:30:85:47:
0b:ee:bc:fb:6e:38:b3:2e:6f:bf:b9:07:51:3c:bc:
66:4b:f9:b0:6c:ff:5a:ad:27:66:8c:e5:af:dd:1c:
d0:99:0c:77:a1:89:4c:77:81:82:98:6c:fe:a8:0c:
43:03:e6:e2:fe:f8:d5:e2:e8:3d:4c:7a:a5:b0:a8:
1f:51:6a:23:15:22:69:cd:7c:73:50:2e:2f:63:9c:
c5:eb:fb:0e:09:a4:29:75:43:0b:73:6c:2c:2e:15:
ff:11:2e:68:a1:9e:1b:12:b2:d8:d5:b9:df:55:f5:
ce:fd:81:37:1d:c1:08:62:bd:6f:ec:c5:a4:27:0d:
0d:47:9a:17:af:77:aa:ab:d1:2b:b4:a7:a0:5e:e2:
32:d4:89:69:ce:ff:8f:61:09:54:0d:e6:f8:ce:3a:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A3:E6:83:74:75:9D:17:CD:EF:04:96:CB:77:51:2F:12:A6:55:8C
X509v3 Authority Key Identifier:
keyid:4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:dd:28:42:fd:c8:bf:19:a5:3a:63:db:5e:cf:9a:aa:bd:6f:
b4:cc:bf:0b:da:88:78:a3:a8:35:01:4a:34:b4:91:60:bd:3a:
a6:9b:45:e9:39:03:73:86:e3:b2:f0:66:dc:cc:a0:ce:a0:15:
84:a8:9c:eb:01:89:19:15:3b:c8:b5:1c:9b:b0:04:94:a7:4a:
d4:64:41:7a:4d:c6:b3:26:96:ff:b4:68:d0:35:15:b2:62:de:
d5:d5:d3:07:dd:8e:a8:56:ac:c5:cc:c5:62:82:f0:01:a7:47:
6e:b3:43:31:75:e9:5b:fe:a0:db:0b:d7:0a:fc:fe:36:7a:ef:
44:c4:1a:b3:6f:09:5f:41:d4:6e:82:ea:74:5a:ea:d2:b7:0d:
25:f7:01:15:84:2f:2c:e3:58:47:ca:4b:86:ad:b3:13:e0:96:
28:83:0a:8c:35:e7:6d:fb:ed:57:0c:d1:de:d9:ac:e2:9a:60:
fb:90:f0:3b:48:90:be:4d:73:23:15:10:30:ce:f8:f8:3a:39:
3e:09:e5:e3:65:bb:42:82:cb:96:bc:c7:ab:67:31:3d:6a:c9:
a6:5e:4d:fc:25:ac:66:a1:0d:22:af:a7:a7:ca:e2:d9:c5:d6:
e7:29:36:04:5f:3c:35:0e:f0:6f:12:c5:8b:0c:e9:67:10:1e:
b8:84:c2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:15:48 2025 by rpki-client